What happens if the customer legitimately created an account and then placed a follow-up order?

The rule will fire if the follow-up order is the second within 30 days on an account less than 3 days old. Use the Clear button to mark it as legitimate. If this happens often, consider raising the velocity threshold to 3 or more orders.

Does the 1-hour SLA automatically block the order if no action is taken?

No. The SLA is a visibility tool that highlights overdue reviews in your inbox. The order continues through your normal workflow unless your team manually intervenes.

Will guest orders trigger this rule?

No. Guest checkouts have no account and no account age. This rule requires a registered customer account. Consider a separate rule for repeat guest orders from the same email.

Can fraudsters bypass this by waiting 3 days between account creation and ordering?

Yes. This rule targets the most aggressive pattern of immediate post-registration ordering. Extend the account age threshold to 7 or 14 days for broader coverage, accepting more false positives.

How to detect rapid-fire ordering from new accounts in WooCommerce | Velocity Alert rule

The problem

Fraudsters and coupon abusers often create a fresh account and place multiple orders in quick succession - testing stolen cards, exploiting new-customer promotions, or building reseller inventory. Without velocity detection, each order appears normal in isolation, and the pattern only becomes visible after the damage is done.

The solution

OrderBadger can detect and flag rapid ordering velocity from newly created accounts, a strong fraud and abuse signal.

Who this is for

Any WooCommerce store that allows account creation and wants to detect rapid-fire ordering from new registrations - especially relevant for stores with new-customer promotions, limited-stock products, or frequent fraud attempts.

At a glance

Account age: under 3 days 2 or more orders in last 30 days 1-hour SLA with Clear/Block actions Badge: Velocity Alert (red, critical) Category: fraud detection

People also search for

WooCommerce flag new accounts placing multiple orders quickly How to detect order velocity fraud from fresh registrations Badge rapid ordering from accounts created in the last 3 days WooCommerce rule for new account coupon abuse detection Spot suspicious ordering velocity from brand-new customers

How it works

Checks two conditions: the customer account must be less than 3 days old, and the customer must have placed 2 or more orders in the last 30 days. When both are true, the order receives a critical badge with Clear/Block interaction buttons and a 1-hour SLA to ensure fast response.

Review the orders placed by this account for signs of fraud - check for multiple shipping addresses, different payment methods, or unusually high totals. Use the Clear button if the activity is legitimate, or Block to flag the account for further investigation. Act within the 1-hour SLA to prevent further orders from shipping.

Rule template

Plain English rule Customer account age is less than 3 days and customer placed 2 or more orders in the last 30 days

Write this (or something similar) in the OrderBadger rule builder. The AI compiler turns it into executable logic automatically.

Make it yours

Adjust thresholds

Extend 'less than 3 days' to 'less than 7 days' to catch velocity patterns from accounts that are a few days old but still suspiciously new.
Raise '2 or more orders' to '3 or more orders' if your store commonly sees legitimate customers placing a second order shortly after their first (e.g. adding a forgotten item).

Add or remove conditions

Add 'and order total is over £200' to focus on high-velocity new accounts placing expensive orders, where the fraud risk is greatest. …ays and customer placed 2 or more orders in the last 30 days and order total is over £200
Add 'and payment method is cod' to specifically flag new accounts rapidly placing cash-on-delivery orders, a pattern common in COD fraud rings. …ays and customer placed 2 or more orders in the last 30 days and payment method is cod
Remove 'and customer account age is less than 3 days' to monitor velocity across all accounts, useful for detecting compromised or hijacked existing accounts.

Badge preview

Default: Velocity Alert✓✗

Passed: Velocity Alert✓

Failed: Velocity Alert✗

This badge appears in the WooCommerce order view with action buttons. Your team can respond directly from the badge pill.

When this rule matches

New Account 3 Orders In 30d

Order total: £95.00 | Guest: no

Account is 1 day old (under £3) and customer has placed 3 orders in the last 30 days (2 or more). Both conditions met - high velocity from a new account.

Same Day Account 2 Orders

Order total: £150.00 | Guest: no

Account was created today (0 days old) and the customer has already placed 2 orders in the last 30 days. Minimum threshold met on a brand-new account.

When this rule does not match

New Account Single Order

Order total: £80.00 | Guest: no

Account is 2 days old but the customer has only placed 1 order in the last 30 days - does not meet the 2-order velocity threshold.

Established Account High Velocity

Order total: £200.00 | Guest: no

Customer has placed 5 orders in the last 30 days, but the account is 45 days old - not less than 3 days. This is a frequent buyer, not a new-account velocity risk.

Account Exactly 3 Days Old

Order total: £120.00 | Guest: no

Customer has 4 orders in the last 30 days, but the account is exactly 3 days old - the rule requires less than £3, so this is at the boundary and does not qualify.

Workflow

This rule includes workflow features that help your team act on flagged orders.

Inbox

Yes

Interaction

Clear / Block

SLA

1h (from created at)

Good to know

Guest checkouts do not have an account age and will not trigger this rule. Consider a separate rule for guest checkout velocity based on email address.
The orders_last_30d count includes the current order. A brand-new customer placing their second order will meet the threshold.
This rule does not detect multiple accounts created from the same IP or email pattern. It operates on individual account data only.

Frequently asked questions

What happens if the customer legitimately created an account and then placed a follow-up order?

The rule will fire if the follow-up order is the second within 30 days on an account less than 3 days old. Use the Clear button to mark it as legitimate. If this happens often, consider raising the velocity threshold to 3 or more orders.
Does the 1-hour SLA automatically block the order if no action is taken?

No. The SLA is a visibility tool that highlights overdue reviews in your inbox. The order continues through your normal workflow unless your team manually intervenes.
Will guest orders trigger this rule?

No. Guest checkouts have no account and no account age. This rule requires a registered customer account. Consider a separate rule for repeat guest orders from the same email.
Can fraudsters bypass this by waiting 3 days between account creation and ordering?

Yes. This rule targets the most aggressive pattern of immediate post-registration ordering. Extend the account age threshold to 7 or 14 days for broader coverage, accepting more false positives.

How to detect rapid-fire ordering from new accounts in WooCommerce